.env.example

# =============================================================================
# Houston local dev — shared env for the TypeScript engine loop.
#
# One-time setup:   cp .env.example .env.local        (.env.local is gitignored)
#
# Then one terminal each (no flags to remember):
#   packages/host          $ pnpm dev        # the TS engine (local host) on :4318
#   app                    $ pnpm start      # desktop app against that host
#   packages/web           $ pnpm dev:host   # browser (localhost:1430) against it
#
# Keep the token IDENTICAL in all three vars below. If HOUSTON_HOST_TOKEN is
# unset the host mints a random token per boot, which 401s both frontends.
# =============================================================================

# --- Host: packages/host local profile (src/local/main.ts) ---
HOUSTON_HOST_TOKEN=devtoken
HOUSTON_HOST_PORT=4318

# --- Connected apps (integrations) — OPTIONAL, off by default ---
# The host wires connected apps (Gmail, Calendar, ...) two mutually-exclusive
# ways. Leave BOTH unset to run with integrations OFF (tool calls report the
# apps aren't set up in this install, and the agent won't offer to connect).
#
#   1) Direct provider — one Composio project key (platform mode; free tier at
#      composio.dev -> Project Settings -> API Keys). The host owns the key and
#      users only OAuth the apps. Simplest for local dev. Self-host uses this.
# COMPOSIO_API_KEY=<composio project key>
#
#   2) Gateway mode — point at the managed gateway instead of holding a key. The
#      per-user credential is the Supabase session, so the app prompts Google
#      sign-in first; a tool call while signed out queues a sign-in card in chat.
#      This is how the desktop app reaches Houston's cloud.
# HOUSTON_INTEGRATIONS_URL=<gateway url>

# --- Desktop (app/): point the app at an EXTERNAL host instead of its own
#     locally-spawned host sidecar. Read by BOTH Vite (the frontend client) and
#     the Rust shell (app/src-tauri/src/lib.rs), which skips spawning the local
#     sidecar when a URL is set and talks to the host above instead. Leave unset
#     to use the sidecar the shell spawns. ---
VITE_NEW_ENGINE_URL=http://127.0.0.1:4318
VITE_NEW_ENGINE_TOKEN=devtoken

# --- Web (packages/web): host mode. Do NOT point web at the host via
#     VITE_NEW_ENGINE_URL — that routes the browser through the bare-runtime gate
#     (/auth/status, /providers) and 404s on the multi-agent host. ---
VITE_CONTROL_PLANE_URL=http://127.0.0.1:4318
VITE_CP_DEV_TOKEN=devtoken

# --- Desktop against the MANAGED hosted gateway (e.g. the gethouston/cloud kind
#     POC on :9080). Unlike VITE_NEW_ENGINE_URL above, the bearer is the user's
#     Supabase session token, so the app prompts Google sign-in first. Replaces
#     the VITE_NEW_ENGINE_URL block above (use one host, not both). ---
# VITE_HOSTED_ENGINE_URL=http://localhost:9080
#
# OAuth toggle (HOU-611): the enable/disable switch for that Google-login gate.
#   oauth (default when a hosted URL is set) -> require Supabase Google sign-in
#   static                                   -> no login; use a static bearer below
# VITE_HOSTED_ENGINE_AUTH=oauth
# VITE_HOSTED_ENGINE_TOKEN=<service token>   # only for VITE_HOSTED_ENGINE_AUTH=static
#
# OAuth needs a baked Supabase project (else the app shows a "Sign-in required"
# misconfig screen). See knowledge-base/auth.md for the full kind login recipe.
# SUPABASE_URL=https://zfpnlvxazrataiannvtq.supabase.co
# SUPABASE_ANON_KEY=<anon public key>